True Grant Solutions
Get a free assessment
Legal

Acceptable use policy

Last updated June 15, 2026.

This is the working version of our acceptable use policy. It describes how the product actually operates today. A version reviewed by counsel will replace it, and material changes will be announced to customers by email.

This Acceptable Use Policy ("AUP") describes prohibited and permitted uses of the True Grant Solutions platform ("TGS", "the Service"). By using TGS, the organization ("Customer") and its authorized users agree to this AUP. This AUP is incorporated by reference into the TGS Terms of Use and should be read with the TGS Privacy Policy.

1. What TGS is for

TGS is a grant management platform built for nonprofit organizations. Permitted uses include:

  • Drafting and managing grant proposals, narratives, budgets, and supporting documents
  • Tracking funders, deadlines, attachments, and submission workflows
  • Conducting research about funders, funding opportunities, and grant programs, including AI-assisted research grounded in public government data (e.g., demographic, health, workforce, and past-award statistics) shown with citations
  • AI-assisted writing, review, and analysis of grant-related content using aggregate program data, organizational descriptions, demographic summaries, and outcome metrics

2. Prohibited content (do not submit)

Customer and its authorized users agree NOT to submit, store, or process the following categories of information using TGS:

2.1 Protected Health Information (PHI)

Any information that identifies an individual and relates to their physical or mental health, healthcare provision, or healthcare payment, as defined under HIPAA. This includes but is not limited to: medical record numbers (MRN), patient IDs; diagnosis or treatment codes (ICD-10, DSM-5, CPT); prescription records, DEA numbers; provider notes referencing specific patients; insurance claim data tied to identified individuals; and combinations such as name + date of birth, name + medical condition, or name + treatment date.

TGS is not a HIPAA-compliant product and does not offer a Business Associate Agreement (BAA) on any plan. TGS is a grant management platform, not a clinical or medical system. Do not process PHI in TGS.

2.2 Substance Use Disorder Records (42 CFR Part 2)

Any records subject to 42 CFR Part 2, federal confidentiality protections for substance use disorder patient records held by federally assisted programs.

2.3 Student Education Records (FERPA)

Any "education records" as defined under FERPA, including personally identifiable information from a student's education records.

2.4 Other regulated personal data

  • Payment card data subject to PCI-DSS (full card numbers, CVVs, magnetic-stripe data). TGS does not store payment card data; payments are processed directly by Stripe.
  • Social Security Numbers, individual Tax IDs, government-issued ID numbers (other than the organization's own EIN used for billing)
  • Biometric identifiers used as identifiers
  • Genetic information protected under GINA
  • Classified or controlled-unclassified-information ("CUI") government records

2.5 Content prohibited by law

  • Content that violates intellectual property rights (copyright, trademark, trade secret)
  • Defamatory, fraudulent, or unlawful content; content used to plan or commit unlawful activity
  • Child sexual abuse material (CSAM) or content sexually exploiting minors

3. Prohibited activities

Customer and its authorized users agree not to:

  • Attempt to access another organization's data, accounts, or workspaces
  • Probe, scan, or test the vulnerability of the Service without prior written consent (responsible disclosure welcome at security@truegrantsolutions.com)
  • Reverse-engineer, decompile, or extract the Service's underlying models, prompts, or proprietary algorithms
  • Use the Service to develop a competing grant management product
  • Attempt to bypass rate limits, quotas, or security controls
  • Use the Service to send spam, harvest contacts, or perform unsolicited outreach
  • Use the Service, or its outputs, to train other AI/ML models, except as expressly permitted
  • Use the optional web-search feature to retrieve, store, or process content that violates this AUP or applicable law

4. Pre-flight protection and AI features

4.1 Pre-flight detector. Before submitting Customer text to AI models, TGS runs an automated detector for likely Protected Health Information and other regulated personal information. If it identifies likely prohibited content, the user is warned and may edit the content or explicitly acknowledge that the content does not in fact contain prohibited information before proceeding. TGS does not silently remove Customer text. Acknowledging a warning does not waive this AUP. The detector is a best-effort safeguard, not a substitute for the Customer's obligation to comply with this AUP.

4.2 Human review of AI output. AI-generated content may contain errors or fabricated information and must be reviewed by a qualified person before being relied upon or submitted to any funder, regulator, or third party. See the Terms of Use (AI-generated content).

4.3 Optional web search. The Service includes an opt-in web-search feature that is off by default. When a user enables it, the user's research query (and AI-generated search queries) are sent to TGS's search provider, and the Service retrieves public web pages limited to an allowlist (government sites, known public data sources, and the relevant funder's website). Users are responsible for the queries they run and must not use web search to obtain or process content prohibited by this AUP.

4.4 Public data sources. AI-assisted research draws on public government data services (e.g., USAspending.gov, U.S. Census Bureau, CDC, HRSA, SAMHSA). These lookups transmit only non-personal parameters (a geographic area and a public funding-listing number) and return public statistics.

5. Enforcement

True Grant Solutions reserves the right to:

  • Suspend or terminate accounts that materially violate this AUP
  • Investigate suspected violations using audit logs and metadata (TGS does not log full AI prompt/response content; see the Privacy Policy)
  • Notify the Customer's designated administrators of suspected violations
  • Cooperate with law enforcement when legally compelled, after providing notice to the Customer where permitted

6. Reporting violations

To report a suspected AUP violation, contact security@truegrantsolutions.com or legal@truegrantsolutions.com.

7. Changes

True Grant Solutions may update this AUP. Material changes will be announced to active Customer administrators at least 30 days in advance via email and an in-product banner. Continued use after a material change constitutes acceptance.

[DRAFT v1.1, pending counsel review. Add specific carve-outs for behavioral-health customers, any signed BAA, and any future Enterprise tier.]